Extracting hashes bitlocker
#1
Question, I am trying to extract the hash of a Bitlocker encrypted drive and I get this output bitlockerjohn.  

Signature found at 0x71bbc000
Version: 2 (Windows 7 or later)
VMK entry found at 0x71bbf907
VMK encrypted with TPM...not supported! (0x71bbf928) 

Then continues, a very long process.

VMK entry found at 0xb5ff5a39
VMK entry found at 0x23b2bad33
VMK entry found at 0x504bb4baa
VMK entry found at 0x511a7f22f


It continues on is that mean that I should wait until it finishes to get the 4 hashes or the fact VMK encrypted with TPM is game over.
Reply


Messages In This Thread
Extracting hashes bitlocker - by Alcanjp - 08-29-2021, 02:16 PM
RE: Extracting hashes bitlocker - by Sondero - 08-29-2021, 08:20 PM
RE: Extracting hashes bitlocker - by Alcanjp - 08-30-2021, 08:36 AM
RE: Extracting hashes bitlocker - by Alcanjp - 08-30-2021, 02:54 PM
RE: Extracting hashes bitlocker - by snakecelot - 05-20-2022, 05:35 AM
RE: Extracting hashes bitlocker - by Eryoli - 05-20-2022, 09:38 PM